# ssdeep
# Compute fuzzy hashes (CTPH) for finding similar files — useful for malware variant clustering
# Docs: https://docs.remnux.org/discover-the-tools/examine+static+properties/general

% hashing, fuzzy, similarity, clustering

# Basic usage
ssdeep <sample>

# Save output to file
ssdeep -m <known.ssdeep> <sample>

# Dump/extract content
ssdeep -d <sample1> <sample2>